Re:The End of Localhost
by josephcsible on Wednesday June 08, 2022 @05:16PM
(#31674322)
If cloud services don't need a VPN to use, why would companies' self-hosted services?
Because they have enough staff to detect and fix vulnerabilities within hours, if necessary. For a company without these resources (and maybe even larger ones), hiding servers from the internet can greatly reduce your attack surface.
Previously when working with a company (small startup or large company) you'd have an office LAN and a few servers, or a corporate VPN which your office network was on, and Openstack, or other 'local' services available.
Now that a large number (the majority?) of devs are working remote, if you want local/internal services you need to get everyone's buggy VPN software configured correctly